REMARKS 



Claims 1-30 were pending and under consideration. 

In the Office Action of April 15, 2005, claim 1-30 were rejected. Claim 1 and 30 were 
rejected as anticipated by Dulude et al. (USP 6310966). Claims 2-6, 8-1 1 and 14-29 were 
rejected as obvious in view of Dulude et al. and Arnes ("Public Key Certification Revocation 
Schemes, " Master Thesis, Queen's Univeristy, February, 2000). Claims 7 and 13 were rejected 
as obvious in view of Dulude et al. and Diffie ("Authentication and Authenticated Key 
Exchanges, 1 ' Designs, Codes and Cryptography, Kluwer Academic Pulishers, 1992). Claim 12 
was rejected as obvious in view of Dulude et al. and Yu et al. (USP 5930804). A minor 
objection was raised in connection with an informality in claims 14 and 16. 

In response, without conceding to the position taken by the examiner in the Office 
Action, and without waiving any right to challenge the arguments, including proving an 
invention date prior to that of Dulude et al., the independent claims 1, 17 and 30 have been 
amended. Claims 14 and 16 have been amended as well taking into consideration the examiner's 
comments. 

Regarding claims 14 and 16, it is believed that the amendments are self evident and 
overcome the objection and rejection. Notice to that effect is requested. Should the examiner 
desire to discuss this further, the examiner is invited to contact counsel at the number indicated 
below. 

Regarding the rejections of the claims under 35 USC 102 and 103, it is submitted that the 
amendments to the independent claims overcomes the rejections, regardless of whatever 
arguments applicants may have or whatever proof of prior invention they may have. 

In that regard, the claims require that a person identification authority acquires a template 
and data from a person to be identified and then creates an identification certificate in which is 
stored an encrypted template with the person identifying data. The template is encrypted with a 
public key. Additionally the claims require that when a user is to be authenticated, the template 
is decrypted by a person authentication entity and compared with sampling information of the 
user. This is supported in the specification at page 58, lines 8-16. No new matter has been 
added. 
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The result is a system that provides for a single registration step yet allows for distributed 
authentication locations and environments. Further, the authentication information can be stored 
and transmitted in a reliably secure manner. 

It is submitted that none of the references, nor any combination of them, fairly discloses 
or suggests these features in a user authentication system. 

In view of the foregoing, it is submitted that claims 1-30 are allowable and that the 
application is in condition for allowance. Notice to that effect is requested. 

^Respectfully submitted, 
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